Application Security Engineer
Conduct dynamic application security testing (DAST), static application security testing (SAST), and software composition analysis (SCA). Use tools like Burp Suite, OWASP ZAP, Fortify, SonarQube, Checkmarx, and others. Manually and / or automatically review source code for vulnerabilities like SQL injection, XSS, buffer overflows, etc. Integrate security into DevOps (DevSecOps) pipelines.
Security Security • Salt Lake City, UT, US